Research And Application On XML Security

The extensible markup language (XML) is a promising standard for describing semi-structured information and contents in the E-business. When XML comes to be a widespread data encoding format for Web applications, safeguarding the accuracy of the information represented in XML documents will be indispensable. In this paper, many technology scheme on XML signature, XML encryption and XML access control are studied. We propose a new Signcryption schema based on the research of cryptography theory and present the Cryptographically Access Control for XML and the implement of XML security communication. The main results of this paper are following:1) Theoretical knowledge and technologies of XML and Web service technologies based on XML are depicted perspicuously. The relation and functional implementation among the XML security technologies are discussed.2) Based on the theory of signature and encryption, A new Signcryption schema is proposed. Message can be signed and encrypted in the same time, which has lower costs than that of "Firstly sign and Then encrypt" .3) Aiming at those related web problems, a new access control scheme is proposed which use conditional access rules to implement the access to specified resource in the circumstance of Internet. It enhances the flexible power of XML access control.4) XML security applications are implemented using XML security library by studying its source codes in C language.5) A new XML Web service system is implemented which incorporates ASP.NET, ADO.NET and XML technologies...